Is pumpfunonsol.xyz a scam? TrustSniffer's high-risk assessment: 5/100

Overview

The domain pumpfunonsol.xyz is a recently registered website. Its homepage carries the title "pump.fun", which is the name of a well-known crypto token-launch platform, and the domain name suggests a link to the Solana ecosystem. The captured homepage holds only a short block of text. Its apparent purpose is to present itself as a crypto-asset service, but the evidence does not tie it to the platform whose name it uses or to any identifiable operator.

Scam/Impersonation Risk

Contradictory signals are present and weigh heavily. Several independent threat-intelligence engines currently rate the domain as malicious or suspicious, and it is blacklisted by external reputation sources. Infrastructure protections do not offset this. The homepage presents itself under the title of an established crypto platform, while the domain is a different, very young .xyz registration made only weeks before the analysis. Brand-name reuse on a freshly registered, unrelated domain is a common pattern in crypto-lookalike abuse. The evidence does not confirm which brand, if any, is being imitated. Behavioral testing did not observe wallet-connection prompts, wallet-drainer behavior, clipboard manipulation, hidden forms, or content cloaking, and it recorded no outbound third-party requests. That is a limited mitigating observation and does not override the threat listings, because malicious behavior on such sites is often conditional or introduced later. No conflicting legal identities were found. Evidence:

• Homepage: the page title presents the name "pump.fun" while the domain is pumpfunonsol.xyz.
• Domain registration: created 2026-08-10, about 0.21 years (77 days) old, through the registrar Dynadot Inc.
• External reputation: 3 malicious and 1 suspicious detections, plus a corroborating external blacklist flag.
• Behavioral sandbox: 3 of 3 runs completed with no external XHR activity and no wallet-drainer, clipboard-hijack, or cloaking behavior.

Regulatory Verification Notes

The homepage names no operating company, registration number, licence, or regulator. The captured text is too short to hold any such disclosure, so no regulatory standing can be inferred. The site's identity could not be independently connected to any real-world brand or person, and its ownership is opaque. No third-party broker or regulatory-database match exists for the domain. This absence is not itself evidence of wrongdoing, but it leaves nothing to counterbalance the reputational findings above. The valid transport encryption is a baseline hygiene item. Free-tier domain-validated certificates are issued to legitimate and malicious sites alike, so this one carries no assurance about who operates the site. Evidence:

• Homepage: no company name, licence, or regulator is stated in the captured page content.
• Transport encryption: TLS certificate issued by WE1 (DV, domain validation only), valid to 2027-01-06.
• Hosting: served from AS13335 (CLOUDFLARENET - Cloudflare, Inc., US).

What to Verify Next

Confirm the platform's genuine web address through its officially published channels, such as its verified social profiles or an independently sourced listing. Do not use a link found on, or sent to the visitor from, this site. Compare that address character by character with this domain. Any prompt to connect a wallet, sign a transaction, or enter a recovery phrase on this site should be treated as unverified until that comparison is done. Check the current reputation status of the domain again before any later reassessment, since listings can be cleared or added over time. Confirm any support or contact channel through an independent, offline route. Evidence:

• Homepage: the title reuses a known platform name on an unrelated .xyz domain.
• Domain registration: created 2026-08-10, so no long-standing public record exists to rely on.
• Threat listings: active at the time of analysis, so a later status change is possible.

Summary Verdict

The overall posture is high risk. Active external threat detections, a very young registration, and an unverified identity that borrows a well-known platform name converge on a cautionary assessment. The few benign technical observations are insufficient to counter them. Legitimacy cannot be presumed, and no real-world operator has been established.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and every observed address is a CDN edge server. This is a mitigating factor only and does not demonstrate legitimacy. The origin server was not observable, so the hosting behind the edge cannot be independently verified. This limits visibility and could allow content to be swapped quickly without any change at the edge. The infrastructure is mainstream and well established, but it cannot offset the reputational findings.

Closing Assessment

The site should be treated as read-only at most. Wallet connections, credential entry, account login, downloads, and any transfer of funds should be avoided. Anyone who has already interacted with it should review their wallet approvals and consider moving assets to a fresh wallet.